Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/CRniCcWOMEu_O5DQOvVrjuaGUUY.roa
File: CRniCcWOMEu_O5DQOvVrjuaGUUY.roa (raw, json)
Hash identifier: O0dkbyqYi64iii79jbjPeoIAejefEkUri+ePo9W2qtM=
Subject key identifier: 09:19:E2:09:C5:8E:30:4B:BF:3B:90:D0:3A:F5:6B:8E:E6:86:51:46
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 0195A8881427857261B60EB8E22EC30C4784
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/CRniCcWOMEu_O5DQOvVrjuaGUUY.roa
Signing time: Tue 18 Mar 2025 09:14:05 +0000
ROA not before: Tue 18 Mar 2025 09:14:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31715
IP address blocks: 46.233.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:88:14:27:85:72:61:b6:0e:b8:e2:2e:c3:0c:47:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Mar 18 09:14:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0919e209c58e304bbf3b90d03af56b8ee6865146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:eb:7f:16:08:df:88:36:b8:6e:5c:57:00:
f0:2d:60:37:be:a2:31:a3:3d:79:7f:cd:5c:25:8f:
7c:b2:05:d3:a0:80:17:0c:57:83:d6:bb:42:f7:c9:
b9:0d:ef:10:fc:64:35:24:0e:f0:b2:bf:f6:e0:43:
4e:ba:38:5c:94:d0:22:ba:7a:fb:fd:73:24:ec:c5:
62:90:51:6b:c7:0e:85:34:a6:3a:72:a3:b0:2b:0c:
4c:4e:2b:22:cc:40:8a:fa:4d:55:ac:3f:a2:11:2b:
66:96:fc:f9:8d:ec:21:41:52:69:07:b7:e6:9f:16:
78:95:89:21:72:93:80:88:c4:a1:86:8d:6c:de:1f:
48:7d:8a:f9:9f:58:04:35:86:e3:53:d3:46:ea:0b:
3b:48:33:7c:df:05:57:13:43:d8:2f:8c:9a:99:5f:
26:25:e4:60:8c:80:bc:f5:27:37:1a:f0:57:b6:9d:
05:88:77:f2:4b:09:57:4e:a7:95:51:f2:fb:ef:4f:
14:4b:bf:ac:8f:3c:93:38:96:d3:fb:94:c6:87:fc:
98:fe:b8:0b:1b:a1:4f:18:d7:83:31:2d:ec:68:15:
01:14:11:f9:a5:a9:a2:f2:bb:7f:00:f5:08:ae:f3:
b6:a7:7a:7d:c2:38:f7:4b:03:13:9c:c2:75:78:06:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:19:E2:09:C5:8E:30:4B:BF:3B:90:D0:3A:F5:6B:8E:E6:86:51:46
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/CRniCcWOMEu_O5DQOvVrjuaGUUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.233.38.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:08:b5:46:ca:2d:13:1c:3f:aa:92:db:5e:b0:46:26:43:1a:
b2:f2:e3:f6:1f:d8:36:c3:8a:f3:e0:eb:9f:f0:d0:be:ba:e2:
8c:7d:a2:ee:c9:f9:0d:6b:b0:7c:73:91:74:72:26:64:1e:ce:
e5:68:83:e6:22:32:6b:f0:a0:ef:54:78:af:26:b3:a9:9f:94:
5b:f1:e5:74:cf:0a:eb:6b:36:54:7d:19:c7:bb:72:12:ce:15:
8d:55:48:50:90:29:c2:e1:a6:75:a6:a1:7e:99:c0:ea:8e:d3:
be:3e:c9:27:83:aa:ec:c9:11:bb:bb:96:aa:97:86:95:54:33:
44:4b:91:35:89:81:19:5c:d1:92:08:91:d2:41:b9:2e:8c:93:
d8:6c:96:dd:01:3b:d1:ef:bd:97:cc:7f:d0:23:2c:fa:41:76:
22:7b:fb:29:a4:c9:da:5a:02:6f:af:8a:6f:28:0e:29:0f:ab:
c7:a4:df:cb:d5:19:e2:04:df:83:b4:24:7c:9d:1e:c4:6c:0e:
8e:c5:f8:73:57:64:d4:87:c1:96:3c:b4:2c:dd:a1:b1:ac:ad:
5b:c0:c9:a2:62:38:c1:62:86:41:84:04:43:c4:bd:c3:0b:87:
40:52:67:f2:6e:e4:13:92:d2:5e:c3:51:41:bf:d7:04:46:ee:
31:75:65:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWoiBQnhXJhtg644i7DDEeEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjUwMzE4MDkxNDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTE5ZTIwOWM1OGUzMDRiYmYzYjkwZDAzYWY1NmI4ZWU2ODY1MTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynXrfxYI34g2uG5cVwDwLWA3vqIx
oz15f81cJY98sgXToIAXDFeD1rtC98m5De8Q/GQ1JA7wsr/24ENOujhclNAiunr7
/XMk7MVikFFrxw6FNKY6cqOwKwxMTisizECK+k1VrD+iEStmlvz5jewhQVJpB7fm
nxZ4lYkhcpOAiMShho1s3h9IfYr5n1gENYbjU9NG6gs7SDN83wVXE0PYL4yamV8m
JeRgjIC89Sc3GvBXtp0FiHfySwlXTqeVUfL7708US7+sjzyTOJbT+5TGh/yY/rgL
G6FPGNeDMS3saBUBFBH5pami8rt/APUIrvO2p3p9wjj3SwMTnMJ1eAYy4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAkZ4gnFjjBLvzuQ0Dr1a47mhlFGMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvQ1JuaUNjV09NRXVfTzVEUU92VnJqdWFHVVVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALukmMA0G
CSqGSIb3DQEBCwUAA4IBAQAMCLVGyi0THD+qkttesEYmQxqy8uP2H9g2w4rz4Ouf
8NC+uuKMfaLuyfkNa7B8c5F0ciZkHs7laIPmIjJr8KDvVHivJrOpn5Rb8eV0zwrr
azZUfRnHu3ISzhWNVUhQkCnC4aZ1pqF+mcDqjtO+Pskng6rsyRG7u5aql4aVVDNE
S5E1iYEZXNGSCJHSQbkujJPYbJbdATvR772XzH/QIyz6QXYie/sppMnaWgJvr4pv
KA4pD6vHpN/L1RniBN+DtCR8nR7EbA6OxfhzV2TUh8GWPLQs3aGxrK1bwMmiYjjB
YoZBhARDxL3DC4dAUmfybuQTktJew1FBv9cERu4xdWXa
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:29 2025 by rpki-client